Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: Mb7ukr7sLRTA0BeTIL0EVvw0/bMmyJiR90KnVqjwExk=
Subject key identifier: BE:84:26:43:42:27:FA:E2:55:6B:54:74:C8:65:25:DC:EC:F3:C3:0A
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 0199FB7CD3E7D78FA088E172A6122AE3A7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: KhVMIzxSKXE/5+fd3jqYp6J08St/r96Cp2cRZavLg2E=)
2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d3:e7:d7:8f:a0:88:e1:72:a6:12:2a:e3:a7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=be8426434227fae2556b5474c86525dcecf3c30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:cc:3b:55:73:eb:bc:48:c2:42:c8:6e:6a:
ca:e3:b4:de:c8:1d:6b:2a:8b:b5:11:75:2e:73:75:
92:bc:02:6c:3e:d6:26:0a:5d:9d:ca:1a:26:dd:8d:
e3:57:dc:df:74:08:1e:a7:1d:fc:98:1c:78:f9:9c:
cf:8e:54:49:ff:e6:f7:2a:da:1d:bf:54:63:cb:95:
2d:0d:7f:84:9c:33:b1:70:68:f5:4c:2f:43:a5:14:
82:d2:50:cd:90:ad:ad:cf:59:50:5f:54:f9:6d:9d:
d6:e0:bd:4e:9a:e2:63:e4:36:d9:72:76:35:af:89:
c7:83:08:f1:a0:3b:22:d1:99:cd:ac:bb:e2:fa:6a:
b9:80:3d:fa:97:66:d6:4e:4e:d7:47:94:55:8b:5e:
76:00:f7:d4:41:80:12:a4:46:57:43:b0:d0:f0:53:
65:75:b1:bc:b8:91:50:05:f6:2a:81:5f:87:3e:15:
14:da:e7:e2:be:34:75:13:25:66:69:b7:0e:5f:e8:
21:37:8f:ec:8c:6d:ce:69:d3:cc:9b:d4:3d:ed:bd:
0a:b2:f1:91:61:a2:38:c1:10:36:0a:a6:de:ec:a8:
c5:61:a7:92:62:3b:92:13:78:ff:7d:12:d7:f4:07:
75:14:ae:50:73:90:12:a4:20:03:ef:0a:55:ed:76:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:26:43:42:27:FA:E2:55:6B:54:74:C8:65:25:DC:EC:F3:C3:0A
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b4:e3:43:89:34:29:90:b0:c9:4f:bc:d5:50:d0:3c:41:b3:
69:1c:5e:8f:a5:82:7b:76:71:df:ab:f6:f0:6f:6e:2f:b8:42:
d0:06:89:e2:dc:da:c7:2f:b9:1f:e8:85:cc:5d:ce:a6:62:83:
7f:6e:5f:c4:8c:ff:40:b3:b6:8c:5c:af:42:77:e4:31:0e:44:
63:f3:41:47:40:8c:fb:d2:7a:98:62:b6:4e:2c:55:78:25:6d:
c4:ff:84:1e:37:ec:bf:cd:cb:b4:58:18:6c:6b:cc:a2:20:f1:
aa:97:63:f9:03:ea:70:c0:b6:49:8b:c7:3a:ec:73:99:de:a2:
d5:73:92:2d:b4:73:ee:b7:2f:fa:a9:dc:5c:33:a1:43:fa:98:
85:8c:03:a3:eb:ed:2e:0d:2c:e8:a3:b1:59:b2:66:f2:6d:11:
95:ba:41:27:9b:16:46:d0:57:b9:32:72:6f:fe:b8:f9:dc:be:
8f:03:0e:77:2d:65:6b:9a:6b:95:71:6b:7a:c1:3b:3d:e5:0f:
fa:b5:0e:c4:c2:26:a6:dd:53:50:6c:65:e3:06:88:2d:27:69:
05:9e:54:7d:dd:fa:9a:1f:eb:9b:54:08:7f:78:43:83:b6:e1:
fc:8e:bb:82:cf:2c:c3:a8:1a:32:4e:4f:2f:21:5c:06:7b:fe:
7d:0e:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:46 2025 by rpki-client